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IN THE CLAIMS : 

Please consider the claims as follows; 

1 . (currently amended) A method for monitoring usage of resources allocated 
to a plurality of nodes of a network, comprising the steps of: 

(a) assigning to a node a parameter indicative of the a rate of chanoe of usage of 
said resources; 

(b) locally monitoring, at the node, [[a]] tfie rate of change of the usage of said 
resources; 

(c) reporting to a centralized management station of the network when the rate of 
change of the usage exceeds a first predetemiined threshold; and 

(d) Initiating , aftor a "sa f o" poriod, a global poll of resources of at least one other 
node from the plurality of nodes of the network by the centralized management station 
in response to reporting from the node. 

2-5. (cancelled) 

6. (previously presented) The method of claim 1 . further including the step of 
adjusting the usage of the resources at one or more of said nodes. 

7. (currently amended) A method for monitoring usage of a resource in 
nodes of a networic, comprising the steps of: 

(a) monitoring usage of the resource in a node to determine when a rate of 
change of the usage exceeds a first predetemnined threshold; 

(b) reporting to a management station of the network when the rate of change of 
the usage exceeds said first predetermined threshold; and 

^""^ initiating , nftor a "oafQ" tim o pcri o cl ^ a poll of resources in the nodes of the 
network by the management station in response to reporting from the node or a time 
interval being exceeded . 
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8. (currently amended) A method for monitoring usage of resources in nodes 
of a network, comprising the steps of: 

asynchronous reporting of an event to a management station of the network ef 
an-eveBt when a rate of change of a usage of at least one resource of said resources In 
any of said nodes deviates from a prescribed norm; and 

periodic polling of said nodes In accordance with a polling interval, and aperiodic 
polling of said nodes in response to reporting of said event, wherein a tunable 
parameter is adjusted in response to the usage. 

9. (cumently amended) A technique for managing a global resource of a 
network in order to reduce the amount of monitoring related traffic, comprising the steps 
of: 

partitioning the global resource into a plurality of node resources, wherein 
each node resource Is assigned to a separate node of the network; 
assigning a budget to each said node resource; 

reporting to a management station of the network when a node exceeds the 
assigned budget as determined using local monitoring of the node resource; 

initiating a polL by the management station^ of node resource usage by the 
nodes of the network in response to rocoiving roporting from tho n odo whoro i n tho 
oosignod budget is oxcoodod i n at tooat ono nodo a determination that a sum of 
previouslv reported budget values recei ved from rennrtino nodes plus an uooer bound 
of budget values for n on~reportinq nodes exceeds a thrashnld - 

de tormintnq whcthor tho cum nf thr^ mpnrfoH wn^ ■ ./^.7 fhf^ reporting node- pluc 
an upper bound of tho value for tho non roporting nodes oxcoods a throcho l d - and 

generating an alami if the sum of the variablo s currently reported budget valufts , 
received in response to the poll initia te d bv the management station^ of the reporting 
nodes exceeds the threshold. 



10. (currently amended) A technique for managing a global resource of a 
letwork in order to reduce the amount of monitoring related traffic, comprising the Steps 
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of: 

partitioning the global resource into a plurality of node resources, wherein 
each node resource is assigned to a separate node of the network; 

assigning to the node a rate of usage of the node resource; 

reporting to a management station of the network when said rate exceeds a pre- 
detennjned threshold as determined using local monitoring of the node resource^ 
wherein said rate is determined usino a variahla time interval : 

InitlaUng a poll, by the management station, of the node resource usage by of the 
nodes of the network In response to receiving reporting from one of the wede nodes 
wheroin said Rjto ic cxceedod in at l e ast one nodo ; 

detennining whether the sum of the reported rates of the reporting nodes plus on 
uppor bound of the rato for tho non reporting nodoo exceeds a threshold; and 

generating an alarm if the sum of the fa t e of change reported rates of the 
reporting nodes exceeds the threshold. 

1 1 . (previously presented) The method defined in claim 8 wherein said nodes 
are selected from the group consisting of routers, switches, bridges, and firewall 
devices. 

12. (previously presented) The method defined in claim 8 wherein said nodes 
are selected from the group consisting of servers, hosts, and layer 4-7 switches. 

1 3. (currently amended) The method of claim 1 , further comprising: 

(e) summing all the reported rate of change of the usage of the resources; and 

(f) generating an alami if the sum exceeds a second threshold, else sotting tho 
"eafo" porlod - and ropoat ctopo (d f » updating a time interval . 

1 4. (currently amended) The method of claim 7. further comprising: 

(d) summing all the reported rate of change of the usage of the resources; and 

(e) generating an alarm if the sum exceeds a second threshold, else setting tho 
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"Safo" poriod and ropoat Gtopo (o g ) updating the time Interval. 
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